
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/xBTz37UUvmA-66QXxTxnLJm6xdw.roa
File: xBTz37UUvmA-66QXxTxnLJm6xdw.roa (raw, json)
Hash identifier: hu+ifqwnJpyyhw8siNJ38hz/VPGGyq5K0hvkfUXw5n4=
Subject key identifier: C4:14:F3:DF:B5:14:BE:60:3E:EB:A4:17:C5:3C:67:2C:99:BA:C5:DC
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 028B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xBTz37UUvmA-66QXxTxnLJm6xdw.roa
Signing time: Tue 31 Mar 2026 07:33:38 +0000
ROA not before: Tue 31 Mar 2026 07:33:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 153.128.0.0/10 maxlen: 10
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 651 (0x28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 07:33:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C414F3DFB514BE603EEBA417C53C672C99BAC5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:4f:c0:39:9c:58:25:85:4e:78:e5:a1:14:
07:f7:60:a1:60:d7:b5:2d:a1:12:c6:ff:ad:53:54:
18:8a:58:0f:01:e1:46:b3:e1:73:99:26:fe:6f:7b:
fb:a8:ee:c6:8c:e7:c3:3c:c0:9b:4d:d3:8f:d8:61:
71:b9:60:f1:a9:b3:8a:46:e0:a5:30:59:37:29:5f:
58:7d:87:26:c1:0c:a6:d8:89:f9:b8:9b:ba:e7:3c:
d3:8d:86:e1:31:39:d8:e6:52:19:3f:ba:21:b5:c7:
46:c4:d1:e8:53:a3:a3:54:87:08:c4:19:aa:0c:43:
30:cb:dc:07:44:e3:16:c5:16:06:8c:39:63:88:56:
2d:4a:4e:02:1a:d0:2a:21:56:38:74:c9:61:df:88:
ef:d9:0e:75:8a:43:28:0b:5a:11:43:e7:44:bf:0f:
96:d2:4a:16:13:fc:48:26:21:05:5e:22:e3:52:04:
d5:a6:41:94:de:59:e8:d6:1c:45:84:1b:63:af:0e:
72:8f:5f:06:c2:b0:bb:e2:c5:c8:50:d4:5e:91:28:
ae:25:97:64:0f:75:b7:ad:fd:27:1f:1a:87:84:eb:
49:58:0b:0f:f1:7c:21:b1:b6:a3:74:6c:c8:71:d5:
46:32:d8:1b:c0:5e:28:95:e3:a2:f4:22:02:6e:92:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:F3:DF:B5:14:BE:60:3E:EB:A4:17:C5:3C:67:2C:99:BA:C5:DC
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xBTz37UUvmA-66QXxTxnLJm6xdw.roa
sbgp-ipAddrBlock: critical
IPv4:
153.128.0.0/10
Signature Algorithm: sha256WithRSAEncryption
95:89:75:98:a7:87:ea:5d:ee:6e:2e:ea:da:d3:8d:6e:f0:e2:
f5:d1:1f:2e:38:b1:cd:49:7f:03:05:11:31:f8:09:85:c5:91:
74:5a:a5:67:38:95:b7:bd:ca:7e:d5:67:57:a2:66:cc:c3:72:
17:6a:db:2c:af:d4:fc:87:90:2f:6a:c5:f7:57:50:a5:68:f5:
48:5f:67:0e:99:8a:47:e7:64:41:8f:51:02:e3:5e:5b:17:c7:
84:5c:de:94:7c:f7:01:74:21:2d:bd:49:0d:74:5d:1f:35:2a:
67:88:d0:65:93:d3:c4:fd:78:61:72:c2:32:b6:2e:35:68:2d:
86:05:f5:11:c1:2b:ec:41:24:ab:07:a9:fa:70:80:15:f7:fd:
8f:0e:34:a1:6d:19:2c:d6:85:66:a6:58:01:4a:a1:21:d9:8b:
2c:20:69:e8:87:62:1e:3e:0c:f2:5b:d9:af:a1:4f:c5:69:cb:
50:83:2a:c2:60:81:85:d2:61:4e:32:d8:a0:f8:03:7e:8f:1f:
3a:4e:86:c4:fd:3c:f6:60:0c:c7:82:4b:33:46:4b:a4:78:46:
b2:59:f9:a0:4a:1d:73:94:6f:87:99:c9:a8:2c:b6:e7:90:18:
0d:eb:5a:64:4e:e4:6b:3b:a7:ab:80:7f:27:5f:1a:67:8c:b0:
60:a0:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client